{"id":"CVE-2010-1886","aliases":["EUVD-2010-1905","GHSA-8373-fv3p-rhqq"],"status":"published","title":"Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows...","description":"Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature.  NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a \"security boundary.\"","severity":{"version":"2.0","score":6.8,"vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01407,"percentile":0.72787,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2010-08-16T18:25:00Z","modified":"2026-06-16T23:19:31Z","products":[{"vendor":"microsoft","product":"windows_2003_server"},{"vendor":"microsoft","product":"windows_7"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_vista"},{"vendor":"microsoft","product":"windows_xp"}],"references":[{"url":"http://support.microsoft.com/kb/2264072","tags":["vendor-advisory","x_refsource_MSKB","x_transferred","Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/kb/982316","tags":["vendor-advisory","x_refsource_MSKB","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/2264072.mspx","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1886"},{"url":"https://github.com/advisories/GHSA-8373-fv3p-rhqq"}],"sources":{"cve":[{"id":"CVE-2010-1886","description":"Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature.  NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a \"security boundary.\"","status":"published","published":"2010-08-16T18:25:00Z","modified":"2024-09-16T20:36:20.103Z","updated_at":"2026-11-02T14:33:29.227451Z"}],"euvd":[{"id":"EUVD-2010-1905","description":"Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature.  NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a \"security boundary.\"","status":"published","published":"2010-08-16T18:25:00Z","modified":"2024-09-16T20:36:20Z","updated_at":"2026-11-03T00:55:12.625541Z"}],"ghsa":[{"id":"GHSA-8373-fv3p-rhqq","title":"Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows...","description":"Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature.  NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a \"security boundary.\"","status":"published","published":"2022-05-14T02:13:12Z","modified":"2023-02-02T05:05:41Z","updated_at":"2026-11-02T14:52:09.721765Z"}],"nvd":[{"id":"CVE-2010-1886","description":"Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature.  NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a \"security boundary.\"","status":"published","published":"2010-08-16T18:39:40.56Z","modified":"2026-06-16T23:19:31.68Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:49.736647Z"}]}}